CVS

这次回北京之前的周末，FreeBSD安全团队发表了内部通知，发现 FreeBSD.org 有些机器被入侵，最近终于做了全面披露了。目前，基本的代码审计和攻击检查已经做完，部分机器还在重装的过程中。

对 FreeBSD 这样的开源项目来说，在基础设施遭到攻击之后，首先必须被怀疑的便是有可能有人在代码库中植入了新的后门。由于代码量十分巨大，逐行审计是非常不现实的。由于 FreeBSD 在 BSD 时代即采用了版本控制系统（最早 BSD 时代是 SCCS，FreeBSD早期是CVS，现在是 subversion），因此，每一行代码的来源，包括作者、具体的修改时间，以及为什么那样修改等等，都可以很容易地查找到。

With several production environment installations, I am now very confident with RELENG_7’s stability and performance. After some discussion with alu@ we have reached the consensus that we should upgrade the system to RELENG_7.

Previously, www.FreeBSDChina.org runs a version used to call as “delphijfork”, which adds several stability improvements, performance enhancements from newer FreeBSD development branches. With RELENG_7, we are able to get rid of almost all these local hacks.

loader同学合并了我们最近一段时间的Handbook翻译成果到中央CVS。CNPROJ的版本与HEAD的差距终于再次缩小了。

Here is a patchset that updates cvs to 1.11.22, which means some bugfixes. I have not throughly tested it yet.

http://people.freebsd.org/~delphij/misc/patch-cvs-1.11.22.diff

Note that a final update would be more complex than this one.

在和re@、security-officer@讨论之后，今天正式完成了BSD gzip的MFC，不过由于mx2的一些问题，现在cvs commit mail还没有发出。

由于Caldera已经将32/V开源，目前FreeBSD 1.x时代的CVS已经可以重见天日。特设立此cvsweb以供世人观看。

FreeBSD 1.x受到AT&T诉讼的影响，曾在1994年6月和解并发布1.1.5.1-RELEASE之后，不得不重建了CVS库（这也是为什么FreeBSD的src/代码库的目录名是/home/ncvs而不是/home/cvs的原因）。随后，经过数月的努力，基于可自由再发布的4.4BSD-Lite代码系的FreeBSD 2.0于1994年11月正式发布。

传统上，SCM系统的用户登录有两种方式，一种是通过启动自己对应的服务，如cvs的cvs pserver或svn的svnserve、Apache DAV等等，而另一种方式是ssh，即不启动服务，而使用ssh来完成身份认证工作，如果通过，则通过ssh远程启动对应的服务，如cvs server和svnserve。

Ruslan Ermilov, a very active FreeBSD committer has recently told us that his wife is in very bad ill and that would cost a lot of money. He would like to get some financial help.

Please consider to donate. Needless to say how he is important for the FreeBSD project, From Peter Wemm (the CVS repository meister)’s statistics, he got the #2 rank of the number of commits in the src/ tree (without the kernel). He is also very active in the networking related stuff of the kernel.

Today Giorgos Keramidas (keramida@) has noted that the following skill that can minimize lock period:

1. save the commit message to a file (say ~/commitlog)
2. cvs ci -F ~/commitlog file[…]